Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031313a3a2f34382d3438203d3e20323732393739.roa
File:                     323830333a623065303a383031313a3a2f34382d3438203d3e20323732393739.roa (raw, json)
Hash identifier:          FcIetA1FWHkMFNO135Qx1lgpX42jm80w5K5BDN+aOAY=
Subject key identifier:   9B:C8:C2:FB:00:F7:25:BF:8A:68:B1:2E:D4:0A:7A:A9:23:95:BF:32
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       5E8BEF7143F9F188FED6337FEAF087B795B97EDE
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031313a3a2f34382d3438203d3e20323732393739.roa
Signing time:             Mon 27 May 2024 20:50:00 +0000
ROA not before:           Mon 27 May 2024 20:45:00 +0000
ROA not after:            Mon 26 May 2025 20:50:00 +0000
asID:                     272979
IP address blocks:        2803:b0e0:8011::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:8b:ef:71:43:f9:f1:88:fe:d6:33:7f:ea:f0:87:b7:95:b9:7e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: May 27 20:45:00 2024 GMT
            Not After : May 26 20:50:00 2025 GMT
        Subject: CN=9BC8C2FB00F725BF8A68B12ED40A7AA92395BF32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ff:97:8f:ee:41:95:99:28:14:ce:4a:a2:7f:
                    94:36:70:cd:44:47:00:b0:82:89:c8:9a:4b:f0:db:
                    af:29:c5:9e:2d:c5:f3:ed:5f:bd:e1:af:63:9b:f5:
                    79:c7:fe:f0:8e:67:94:4e:1a:c4:a5:8c:e9:ca:29:
                    31:8c:08:00:a0:bd:e9:07:2b:48:29:ac:09:60:56:
                    9d:5b:82:4e:22:fc:49:98:ef:d4:72:04:2d:d6:5e:
                    60:30:32:b5:5c:44:a1:99:98:ea:d3:a7:de:ea:f4:
                    5b:67:5a:99:52:d2:0f:4f:9f:4a:d1:27:0f:00:1d:
                    39:8e:cb:b2:e4:e1:53:19:db:b5:e2:0d:f3:ce:a0:
                    86:b8:46:20:9e:6a:18:45:3c:9e:fc:a8:fe:7a:ba:
                    07:9a:5c:c3:fd:47:7a:c8:12:29:37:5f:e6:d0:96:
                    95:27:18:87:00:57:dc:19:3b:38:6c:ac:3e:1f:31:
                    0d:bd:5e:c7:33:55:03:6e:6e:9e:14:2c:c4:8e:11:
                    dd:1e:0c:6a:f7:01:9a:a8:0b:6a:f9:a5:01:8c:92:
                    1c:1e:ab:75:78:b6:48:e4:0b:44:d3:d1:91:0b:49:
                    88:0c:ba:6d:94:06:83:67:14:bf:d5:61:68:89:23:
                    1e:3e:03:65:9d:24:a5:69:48:ef:2e:99:3a:7d:7e:
                    54:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C8:C2:FB:00:F7:25:BF:8A:68:B1:2E:D4:0A:7A:A9:23:95:BF:32
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a383031313a3a2f34382d3438203d3e20323732393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:8011::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:af:c3:54:e6:2d:ba:9f:88:12:02:bb:c3:a4:f3:76:a8:24:
         3c:73:68:37:0c:73:1b:1a:5b:4b:e0:b6:26:8c:52:0a:14:fd:
         0b:9e:cc:4e:11:0d:d8:e8:00:7d:ce:7f:0a:9c:3e:86:5c:92:
         11:20:52:36:d6:05:70:76:02:2e:6c:1c:16:13:cd:02:72:d7:
         52:f5:de:69:89:62:9c:cf:3f:00:ca:a5:eb:08:33:63:48:ea:
         55:3f:1d:8c:7e:90:30:f4:a9:b0:62:af:93:0a:96:c8:17:17:
         13:32:ef:58:35:4a:26:7b:2e:f0:1f:8f:c1:22:17:58:4d:37:
         14:3a:83:6a:9a:81:81:8c:a1:4a:83:9e:b9:7e:e7:f5:c1:f7:
         f4:52:54:6c:83:ed:6b:13:99:51:9b:b7:73:42:07:b5:d0:56:
         58:29:2a:bd:cf:ce:b9:ce:05:01:3b:9f:f2:22:f3:81:b3:07:
         3e:0b:91:c9:af:e6:49:07:f6:be:bc:08:98:a9:e9:6a:02:cb:
         79:ee:a8:2a:c9:ae:ae:26:ff:fa:da:c5:44:50:08:12:d4:97:
         12:74:f2:83:1f:39:d1:2d:22:a1:c7:e3:1a:85:8e:6c:1b:cd:
         96:84:b5:fe:94:f9:a5:30:1a:69:bb:c6:67:aa:c7:4e:90:24:
         89:cf:e8:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----